IEC PAS 62443-3:2008

FOREWORD
INTRODUCTION
1 Scope
2 Normative references
3 Terms, definitions, symbols, abbreviated terms and
  conventions
  3.1 Terms and definitions
  3.2 Symbols and abbreviated terms
4 Introduction and compliance
5 Principles and reference models
  5.1 General
  5.2 Threat-risk model
  5.3 Security life cycle
  5.4 Policy
  5.5 Generic reference configurations
  5.6 Protection models
6 ICS security policy - Overview
7 ICS security policy - Principles and assumptions
  7.1 ICS security policy - Principles
  7.2 ICS security policy - Assumptions and exclusions
  7.3 ICS security policy - Organization and management
8 ICS security policy - Measures
  8.1 Availability management
  8.2 Integrity management
  8.3 Logical access management
  8.4 Physical access management
  8.5 Partition management
  8.6 External access management
Annex A - Projected new edition of IEC 62443
Bibliography

It establishes a framework for securing information and communication technology aspects of industrial process measurement and control systems including its networks and devices on those networks, during the operational phase of the plant's life cycle. It provides guidance on a plant's operational security requirements and is primarily intended for automation system owners/operators (responsible for ICS operation).